EZD0920I    Remote security endpoint IP address cannot be determined from IP address range ( ip_range ) errid = errid

Explanation

While attempting to activate a dynamic tunnel, the IKE daemon failed to determine the remote security endpoint IP address for the tunnel.

ip_range is the address range from which the IKE daemon was trying to obtain the endpoint location.

errid is a unique error ID for the occurrence of this message.

System action

The dynamic tunnel activation failed; IKE daemon processing continues.

Operator response

Review and alter the IPSec configuration as necessary. See the information about Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference for more information about configuring policy. After you review your configuration, if you believe that the IKE daemon should be able to determine the source IP address, contact the system programmer.

System programmer response

Contact IBM® software support services with the errid and provide a syslog that includes this message. If available, provide a CTRACE for component SYSTCPIK.

Module

policymgr.cpp

Procedure name

PMGet_Phase1Rule